CVE-2016-0913

The client in EMC Replication Manager (RM) before 5.5.3.0_01-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
dellCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
VendorProductVersion
emcnetworker_module_for_microsoft_applications
𝑥
≤ 8.2.3.6
emcnetworker_module_for_microsoft_applications
3.0
emcnetworker_module_for_microsoft_applications
3.0.1
emcreplication_manager
𝑥
≤ 5.5.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://seclists.org/bugtraq/2016/Oct/6
http://www.securityfocus.com/bid/93348
http://www.securitytracker.com/id/1036940
http://seclists.org/bugtraq/2016/Oct/6
http://www.securityfocus.com/bid/93348
http://www.securitytracker.com/id/1036940